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Good morning. It’s an honor to be here. 


that I hLvraJwtl”" for one year and one month. I like to joke 

th? oh and ? r 1 months to go, as if I'm serving time. But the truth is, I iove 

this job, and I wake up every day excited to be part of the FBI. 

♦u P^st year, I have confirmed what I long believed - that the FBI is filled 

t^m^weTT^h Of thinglaround the worirand doi^r 

them weif I have aiso confirmed what i have long known: that a commitment to the^uie 
of law and civil liberties is at the center of the FBI. It is the organizationai spine. 

to 0 , 01 ,®"' “"front serious threats - threats that are changing every day So I want 
to make sure we have every tooi we need to keep you safe from those threats. 


An Opportunity to Begin a National Conversation 

niihiio 'd '"•1®* fr*® ‘mpact of emerging technology on 

in thp ' think it’s important to talk about the worfwe do 

in the FBI, and what we need to do the job you have entrusted us to do. 

There are a lot of misconceptions in the public eye about what we in the 
government collect, and the capabilities we have for coLcting thaSmat^^^^^ 

at tha to explain and clarify where I can with regard to the work of the FBI But 

at the same time, I want to get a better handle on your thoughts because those of us in 
law enforcement can't do what we need to do without your ^st and^ouTsup^rt 

to *® '“'y 9°®' '® to tose our fellow citizens 

res'?^Tt!reir;i;“ ®"‘' “''’®^® “® ‘>®' 
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The Challenge of Going Dark 


T^^'hnology has forever changed the world we live in. We’re online in one wav or 

np^nnair Phones and computers have become reflections of our 

personalities, our interests, and our identities. They hold much that is important to us. 

eho that comes a desire to protect our privacy and our data - you want to 

A people you choose. I sure do. But the FBI has a sworn duty to 

of '^h'^ American safe from crime and terrorism, and technology has become the 
tool of choice for some very dangerous people. 


Unfortunately, the law hasn’t kept pace with technology, and this disconnect has 
created a significant public safety problem. We call it “Going Dark,” and what it means is 
charged with protecting our people aren’t always able to access the 
f prosecute crime and prevent terrorism. We have the legal 

f fripf ^o'^'^unications and information pursuant to court 

order, but we often lack the technical ability to do so. 

two overlapping challenges. The first concerns real-time court-ordered 
interception of what we call data in motion,” such as phone calls, email and text 

dal second challenge concerns court-ordered access to 
data stored on our devices, such as email, text messages, photos, and videos. And both 
real-time communication and stored data are increasingly encrypted. 


Lst s talk about court-ordared intarception first. 

electronic surveillance was more straightforward We 
Identified a target phone being used by a bad guy, with a single carrier. We obtained a 
court order for a wiretap, and, under the supervision of a judge, we collected the 
evidence we needed for prosecution. 

\At^ h countless providers, networks, and means of communicatinq 

t^o to work and to school, from 

Hn thff? f'®'<^.to Starbucks, over many networks, using any number of apps. And so 

thP toe same devices, the same networks and 

thft mTif Iff to torget victims, and to concoct cover-up stories And 

that makes it tough for us to keep up. 

If a suspected criminal is in his car, and he switches from cellular coveraqe to Wi- 

"'^'■toh®® from one app to another, or from c^S voice 
fn th^ * of messaging app, we may lose him. What if he has a kidnapped child 

to® capability to quickly switch lawful surveillance^between 
eveTday " """" tois; they’re taking advantage of J 
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In the wake of the Snowden disclosures, the prevailing view Is that the 
government js sweeping up all of our communications. Of course, that’s not true And 
Zl Si’ has access to all communicaZns at all 

owZ^ndi^S " “ '° *''® '™®s«9a«°ns of law enforcement agencies that 

suSTri""'*' “--“ni-t-s of 


Some believe that the FBI has these phenomenal capabilities to access any 
information at any time - that we can get what we want, when we want it, by flipping 


!* people to understand that law enforcement 

® to access communications and information to bring people to justice 

and strict oversight. But even 

wrth lawful authority, we may not be able to access the evidence and the information we 


Current law governing the interception of communications requires 

broadband providers to build interception capabilities 
into their networks for court-ordered surveillance. But that law was enacted 20 years 
ago - a lifetime in the Internet age. And that antiquated law doesn’t cover new means of 

anri mnci ® Companies provide some form of communication service 

and most are not required to provide lawful intercept capabilities to law enforcement 


What this means is that an order from a judge to monitor a suspect’s 

amount to nothing more than a piece of paper. Some companies 
fell to cornply with the court order. Some can’t comply, because they have not 

hfvf tlf Other providers want to provide assistance, but they 

have to build interception capabilities, and that takes time and money. ^ 

AccictJ'l^ cof^Panies not currently subject to the Communications 

Assistance for Law Enforcement Act should be required to build lawful intercept 
capabilities for law enforcement. We aren’t seeking to expand our authority to intercept 
communications. We are struggling to keep up with changing technology. 

And if the challenges of real-time interception threaten to leave us in the dark 
encryption threatens to lead all of us to a very dark place. 

Encryption 


_ the challenge to law enforcement and national 

security officials is markedly worse, with recent default encryption settings and 
encrypted devices and networks - all designed to increase security and privacy. 
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operating system, the information stored on many iPhones and 
other Apple devices will be encrypted by default. Shortly after Apple’s announcrmen? 
Google announced plans to follow suit with its Android operating system. This means’ 
the companies themselves won;t be able to unlock phones, laptops, and tablete to 
reveal photos, documents, email, and recordings stored within. 

Both companies are run by good people, responding to what they perceive is a 

market demand. But the place they are leading us is one we shouldn’t go to without 
careful thought and debate. u-iyu lu wunoui 

At the outset, Apple says it’s not that big a deal. Apple argues that its users can 
back-up and store their data in “the cloud,” and that the FBI can still access that data 
But uploading to the cloud doesn’t include all of the stored data on a bad guy’s phone 
which cr6at6s a black hole for law enforcement. 

And if the bad guys don’t back up their phones routinely, or if they opt out of 

And ^ o" encrypted devices themselves, 

the^cloud^ ^ worried about what’s on the phone who will be most likely to avoid 

Encryption isn’t just a technical feature; it’s a marketing pitch. But it will have verv 
senous consequences for law enforcement and national security agencies at every 

of evading detection 

quertfonratwhafco^^^^^ ^ "'y 

Correcting Misconceptions 

metadata, which includes telephone 

records and location information from telecommunications carriers. That is true But 

communication. It’s incomplete information 
and even this is difficult to access when time is of the essence. I wish we had time in 
our work, especially when lives are on the line. We don’t. 

There is a misconception that building a lawful intercept solution into a svstem 
Sr " adversaries and hackere may t^to 


t . -j '^® ^ seeking a back-door approach We want to use the 

rf^ and with clear guidance provided by law We 

'®9®' process - front doors that 

attach ®'''^®"®® information we need to investigate crime and prevent terrorist 
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aciversaries will exploit any vulnerability they find. But it makes more 
Dha^ *rath ^ security risks by developing intercept solutions during the design 
KinfafteVthTf^^^ patchwork solution when law enforcement comes 

ipTv^nn fact. And with sophisticated encryption, there might be no solution 

g government at a dead end - all in the name of privacy and network security. 

h misperception is that we can somehow guess the password or break into 

the phone with a so-called “brute force” attack. Even a Lpercomputer3d hale 

the ® encryption, and some devices have a setting whereby 

someone makes too many attempts to break^the ^ 
password, meaning no one can access that data. 

Finally, a reasonable person might also ask, “Can’t you just compel the owner of 
the phone to produce the password?” Likely, no. And even if we could, if we had a child 

slntenrL'f ^® choose to sit quietly through a 30-day contempt 

sentence for failure to provide his password, or he could risk a 30-year sentence^for 
production and distribution of child pornography, which do you think he would choose? 

Case Examples 

nr «... ®™rtphone, without Internet access, without textinc 

anri taft h h- a n ®very day. I’m guessing most of you would feel rather lost 

and left behind. Kids call this FOMO, or Tear of Missing Out.” 

With Going Dark, those of us in law enforcement and public safety have a major 

us"' mfesroT ' "’'f ^ ‘P® nroswSrabte amor 

termriS^ Sr® who target our communities ... missing out on a 

terrorist cell using social media to recruit, plan, and execute an attack. 

Criminals and terrorists would like nothing more than for us to miss out And thP 
more we as a safety rely on these devices, the more important t^J ^re l l aw 

trafficking, domestic abuse, and child exploitation - where " 
al evidence came from smartphones, hard drives, and online communication. 

Let s Just talk about cases involving the content of phones. 

rtiH ® known sex offender posed as a teenage girl to entice a 12-vear- 

old boy to sneak out of his house to meet the supposed young girl. This predator'^ 

nn1!nth^h- ^ ^®'^’ ^^urdered the young boy, and tried to alter and delete evidence 

on both his and the victim’s cell phones to cover up his crime. Both phones were 

lentelTrld H ^ suspect enticed this child into his taxi. He was 

sentenced to death in April of this year. 
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In Los Angeles, police investigated the death of a two-year-old girl from blunt 

^rohon^to^ the par^nts- 

vn mn S! H Hf members, proved the mother caused this 

y ng girl s death, and that the father knew what was happening and failed to stop it. 

for defendants failed to seek medical attention 

for hours while th^r daughter convulsed in her crib. They even went so far as to paint 

her tiny body with blue paint - to cover her bruises - before calling 911. Confronted with 
this evidence, both parents pled guilty. 

Hiot K investigated a drug trafficking organization tied to heroin 

distribution, homicides, and robberies. The DEA obtained search warrants for several 
phones used by the group. Text messages found on the phones outlined the group’s 
distribution chain and tied the group to a supply of lethal heroin that had caused 12 
overdoses - and five deaths - including several high school students. 

Sacramento, a young couple and their four dogs were walking down the street 
at night when a car ran a red light and struck them - killing their four dogs, severing the 

young man s leg, and leaving the young woman in critical condition. The driver left the 
scene, and the young man died days later. 

Dot I *'3*^^ cameras” near the scene of the accident, the California Highway 

atrol identified and arrested a suspect and seized his smartphone. GPS data on his 
phone placed the suspect at the scene of the accident, and revealed that he had fled 

California shortly thereafter. He was convicted of second<legree murder and is serving 
a sentence of 25 years-to-life. ocivmy 

The evidence we find also helps exonerate innocent people. In Kansas data 
® f® phone was used to prove the innocence of several teens accused of rape. 
Without access to this phone, or the ability to recover a deleted video, several innocent 
young men could have been wrongly convicted. 

These are cases in which we had access to the evidence we needed. But we’re 
seeing more and more cases where we believe significant evidence resides on a phone 

* crack the password. If this becomes the norm, homicide cases 
VI he stalled, suspects could walk free, and child exploitation victims might not be 
Identified or recovered. Justice may be denied, because of a locked phone or an 
encrypted hard drive. ,v. an 

My Thoughts 


’ m deeply concerned about this, as both a law enforcement officer and a citizen, 
understand some of this thinking in a post-Snowden world, but I believe it is mostly 
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bas^ on a failure to understand why we in law enforcement do what we do, and how 

VV0 QO IT. 


I hope you know, given my history, that I’m a huge believer in the rule of law But 
I also believe that no one in this country is beyond the law. 


I like and believe very much that we need to follow the letter of the law to 
examine the contents of someone’s closet or someone’s smart phone. But the notion 
that the marketplace could create something that would prevent that closet from ever 
being opened, even with a properly obtained court order, makes no sense to me. 


It might be time to ask: Where are we, as a society? Are we no longer a countrv 
governed by the rule of law, where no one is above or beyond that law? Are we so 
mistrustful of government - and of law enforcement - that we are willing to let bad guys 
walk away ... willing to leave victims in search of justice? 


There will come a day - and it comes every day in this business - where it will 
matter a great deal to innocent people that we in law enforcement can’t access certain 

types of data or information, even with legal authorization. We have to have these 
discussions now. 


believe people should be skeptical of unchecked government power. I am This 
countiy was founded by people who were worried about government power so they 
divided It among three branches, with checks and balances for each. And they wrote a 

Bill of Rights to ensure that the “papers and effects” of the people are secure unless the 
government has a warrant. 


But the way I see it, the means by which we conduct surveillance through 
telecommunication carriers and those Internet service providers who have developed 
awful intercept solutions is an example of government operating in the way the framers 
intended - that is, the executive, the legislative, and the judicial branches proposing 
enacting, executing, and overseeing legislation, pursuant to the rule of law. 

Perhaps it’s time to suggest that the post-Snowden pendulum has swung too far 
in one direction - in a direction of fear and mistrust. It is time to have open and honest 
debates about liberty and Security. 

Sorne have suggested there is a conflict between liberty and security. I disagree. 
At our best, we in law enforcement, national security, and public safety are looking for 
security that enhances liberty. When a city posts police officers at a dangerous 
playground, security has promoted liberty - the freedom to let a child play without fear. 
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The people of the FBI are sworn to protect both security and liberty It isn’t a 

"berty through'due proiss 

of law, while also safeguarding the citizens we serve - in every investigation. 

Where Do We Go From Here? 

i.nH^ issues. And finding the space and time in our busy lives to 

beauty oMm^tin life ^ P®°P'® ^1° disagree, and that’s the 

I’ve never been someone who is a scaremonger. But I’m in a dangerous 
business. Sol want to ensure that when we discuss limiting the court-authorized law 
enforcement tools we use to investigate suspected criminals that we understand what 
society gams, and what we all stand to lose. 

noctiw r? to throw every tool we have at this problem, but it’s 

costly. It s inefficient. And it takes time - time we often do not have. 

We need to fix this problem. It is long past time. 


«rHore assistance and cooperation from companies to comply with lawful court 

SS ’ that criminals around the world cannot seek safe haven for lawless conduct 
We need to find common ground. We care about the same things. And we know an 
adversarial posture won’t take any of us very far down the road. 

^ the private sector’s need to remain competitive in the global 
marketplace. And it isn t our intent to stifle innovation or undermine U.S. companies But 

^ IlT ^ '^^'P.t'^®®® companies understand what we need, why we need 

It and how they can help, while still protecting privacy rights and providing network 
security and innovation. We need our private sector partners to take a step back, to 
change course. We need them to do the right thing. 

also need a regulatory or legislative fix to create a level playing field, so that 

n! providers are held to the same standard, and so that those of 

VO. hL national security, and public safety can continue to do the job 

you have entrusted us to do, in the way you would want us to. 

Perhaps most importantly, we need to make sure the American public 
understands the work we do, and the means by which we do it. 

XA/O hax/LT^**^ do believe we can get there, with a reasoned and practical approach. And 
tT<5tLrt tho together. I don’t have the perfect solution. But I think It’s important 

to start the discussion. I m happy to work with Congress, with our partners in the private 
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sector, with my law enforcement and national security counterparts 
we serve, to find the right answer - to find the balance we need. 


and with the people 


Thank you for having me here today. 


### 
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